Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Issue with logging out without using the DNN LOGIN CONTROLIssue with logging out without using the DNN LOGIN CONTROL
Previous
 
Next
New Post
3/25/2009 1:16 PM
 

I m trying to resolve a problem of logging out successfully by allowing the user to click a link. 

I have multiple portals in my site and i had to remove the offical Login-Register control because if a user was on a child portal and wanted to register or login they would click on the register link and it would register them to the child portal and same with login if they clicked on the login link on the child portal it would log the user into the child portal that was no use to me.

So my removing the Login-register control from the page and just creating a Login hyperlink pointing to the main portal login page and same for the register this works great , now when your on any portal when you click login or register it will bring you the main portals pages.  The issue arises when a user who is successfully logged in wants to logoff. 

I have the logout hyperlink pointing to the URL in this format :> http://r8yourpolitician.co.uk/tabid/36/portalid/0/Logoff.aspx this works I get logged out and i get redirected to the right page.  However if i click on "login" again it automatcily logs me in without asking for username or password.  It behaves as if i was never logged out. 

Of course if you clear your cookies and cache you will not get this but I expect when a user logs of they should be logged of because if another user came after them and used the computer and cliked login so they could use the site it would log in the last person who logged of . 

Any advice on how I can solve this security risk , how can make sure that user is logged of and and cannot log in unlesss they provide credentials.

kind regards

 
Previous
 
Next
HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Issue with logging out without using the DNN LOGIN CONTROLIssue with logging out without using the DNN LOGIN CONTROL


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out